Trust Centre

Trust is a set of inspectable boundaries.

This page describes ANULUM’s public control model and present evidence. Project-specific controls, obligations and assurance exist only when written into an engagement.

01Custody02Identity and authority03Evidence and change04Recovery and exit

Current public control position

Current site

Tracker-free public surface

The site uses no analytics, advertising pixels, external fonts, cookies or contact form. The Fit Check runs locally.

Delivery method

Boundary before data

First contact requires no documents. Deeper access is scoped by purpose, participants, location, authority and retention.

Architecture

Replaceable components

Models, serving engines and hardware are selected against an acceptance set; no single vendor is represented as the permanent control plane.

Governance

Named change gates

Models, data, prompts, retrieval, tools and infrastructure are versioned and should be promoted only through explicit approval and regression evidence.

Evidence

Source and decision records

Official, measured, calculated and provisional claims stay distinct. Negative findings belong in the decision packet.

Exit

Portability defined early

Export, restoration, key ownership, data return or deletion and operational handover are part of scope—not an afterthought.

“Where is the data?” requires nine answers

At restprimary data and indexes

In processinginference and temporary files

Control planemanagement and orchestration

Keysownership and custody

Administratorsauthorized people and locations

Supportremote paths and approvals

Logscontents, location and retention

Backupscopies and restore authority

Exitexport, return and deletion

“Swiss-hosted” alone does not answer these questions. Each deployment records them separately.

Shared responsibility

Client responsibilities

lawful purpose, legal basis, information classification and data rights
authorized users, business process, human review and final decisions
representative acceptance material and acceptance authority
site, network and organisational controls assigned to the client

ANULUM responsibilities

the technical delivery and controls named in the written scope
configuration, change, test and evidence practices assigned to ANULUM
transparent limitations, dependencies and negative findings
agreed recovery, handover and exit artefacts

The signed project documents—not this website—determine the final allocation.

Regulatory orientation, not legal advice

Swiss data-protection law applies directly to AI-supported personal-data processing; the FDPIC highlights transparency and impact assessment for high-risk processing. Liechtenstein’s FMA states that DORA applies there through its implementation framework from 1 February 2025. ANULUM can map technical evidence to a client-defined obligation set; it does not certify compliance or replace counsel.

Not currently claimed

ISO, SOC 2 or another independent ANULUM certification
regulatory approval, legal compliance opinion or universal control coverage
public 24/7 support, guaranteed response times, availability, RTO or RPO
a completed independent penetration test of every future client deployment
production performance for an unbuilt or unmeasured system

Where assurance is required, the engagement identifies the required reviewer, evidence, scope and gate before the claim may be made.